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.^evi ces and method for recording and 
analyzing temporal events 

5 The present invention concerns devices and methods for 
temporal metering and temporal analysis of events, in 
particular applicable to software services. It may 
relate in particular to the checking of occurrences of 
events or the analysis of malfunctions in relation to 
10 these events. 



The development of computer networks has multiplied the 
possibilities of remotely accessing services available 
on certain machines, such as in particular games, 

15 educational programs, videos or music. The software 
services, in particular, rely on the presence of an 
executable piece of software in one of the machines and 
on access so as to execute this software from an / 
appliance linked to this machine by a network. It then 

2 0 turns out to be very useful to be able to maintain a 
temporal trace of the successive calls, so as to set up 
effective management going beyond simple addition of 
the calls and be capable of diagnosing with more 
capabilities the circiimstances and causes of any 

25 malfunctions. 



Such monitoring is for example valuable for a software 
supplier licensing his product to a service provider 
and receiving a remuneration which depends on the 

30 number of calls for a given period. The existence of 
files siimmarizing all the calls made, created at the 
premises of the service provider but accessible to the 
software supplier, then allows the latter to check the 
actual number of calls and to bill the service provider 

3 5 accordingly . 
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However, consecutive records of the times of calls lead 
to files of increasing and rapidly ciimbersome, or even 
prohibitive, sizes once the number of calls becomes 
significant , 

5 

Patent application WO-01/82033 discloses a procedure 
for detecting use of program for billing purposes. 
According to this procedure, all the calls to a 
function of the program are recorded in a log file, so 

10 as to make it possible to bill the licensee as a 
function of the extent of utilization of the program. 
An identification representing the number of calls is 
then co-recorded with an identification of the system 
time and a cryptographic signature, after a 

15 predetermined number of calls or in first predefined 
time intervals. 

The number of records is thus reduced, since the latter 
are not made systematically, but episodically. However, 
20 insofar as the results obtained are recorded at a 
sufficient frequency to remain reliable, this procedure 
does not solve the problem of increasing file size, but 
can only attenuate or delay the effects thereof. 

25 It would moreover be conceivable to transfer the 
results obtained to an independent storage space, 
either in real time, or as soon as the information 
files reach a predefined size. However, such a 
mechanism is at risk of requiring fairly voluminous 

30 storage resources, and necessitates the installing of a 
transfer device that is penalizing for the effective 
operation of the machine containing the software. 

Patent US-6,026,139 discloses a counting procedure able 
35 to generate a frequency distribution representation 
such as a histogram. An integrated device counts the 
numbers of occurrences of a predetermined type of 
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events in measurement periods, doing so during a period 
of sub-experimentation associated with given 
parameters. At the end of each of the measurement 
periods, a frequency counter is incremented when the 
5 number of occurrences is greater than a predefined 
threshold value. These operations make it possible to 
obtain for the period of sub-experimentation the number 
of measurement periods during which the targeted events 
have occurred in a significant manner. One proceeds in 

10 a similar manner for the whole set of successive 
periods of sub-experimentation, this leading to a 
frequency distribution based on the number of periods 
of measurements adopted for each period of 
sub-experimentation. It is thus possible to compare 

15 various frequencies of occurrences according to the 
parameters chosen . 

This technique considerably reduces the information to 
be recorded, and therefor the storage size required, 
20 but to the detriment of the temporal information 
regarding the events. 

The present invention relates to a device for temporal 
metering of calls to a software service available on a 

2 5 machine, possibly capable of providing significant 

results while yet solving the problem of increasing 
sizes of log files, and without prejudicing the current 
operation of the machine. 

3 0 More generally, the invention relates to a device for 

temporal metering of events, which can make possible an 
at least partial temporal reconstitution of the 
occurrences of these events, which reconstitution is 
sufficient to obtain the desired cues, while yet 
35 offering the advantages mentioned above. It may be 
particularly beneficial in respect of embedded systems. 
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The invention also relates to a method of metering 
events corresponding to the metering device of the 
invention, and to a device and a method of temporal 
analysis of events making it possible to utilize 
5 results obtained by means of a device or of a method of 
metering events according to the invention. 

It applies in particular to the checking of calls to a 
software service, for the purposes of billing or of 
10 diagnosis of malfunctions. However, it can also be 
applied to other types of checking or analysis of 
malfunctions, such as in particular: 

the monitoring of the use of a computing 
functionality available on a machine; this makes it 
15 possible to retrace the use of a function in case of a 
software or hardware fault; 

the monitoring of telephone calls, made from a 
telephone exchange and/or received by the latter; 

the monitoring of orders and of deliveries of 
20 video programs (VOD standing for ^'Video On Demand") or 
audio programs (MP3 files for example) pertaining to a 
server (or several) ; 

the monitoring of maneuvers performed in a 
repeated manner on motor vehicles, for example the use 
25 of brakes, of the accelerator and/or of the gearbox; 

the monitoring of circumstantial events, for 
example in the aeronautical field the presence at 
altitudes above (or below) a threshold, and in the 
medical field, the overshoots of a ceiling, or 
30 undershoots of a floor, of amounts of an element in the 
blood (insulin, glucose, white cells, etc.), 

For this purpose, the subject of the invention is a 
device for temporal metering of events, comprising: 
35 - a module for real time input of occurrences of 
physical events, 
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a module for access to at least one clock, which 
module is designed to obtain a current time with each 
input of one of the occurrences, 

and a module for recording in at least one 
5 metering file, information pertaining to these 
occurrences and to the corresponding current times, 
this information authorizing an at least partial 
temporal reconstitution of the occurrences. 

10 According to the invention, the metering device also 
comprises a module for summary processing of the 
occurrences and of the current times, which module is 
designed to produce condensed results. Furthermore, the 
recording module is designed to record the condensed 

15 results in predefined data structures of prefixed sizes 
of the metering file, so as to make it possible to keep 
the size of the file constant during successive 
recordings of the information. 

2 0 Thus, contrary to all expectations, the temporal 
information desired may be brought together in a form 
siimmarized into a file of constant size, or into 
several predefined files each having a constant size. 
This surprising result relies on the one hand on the 

25 summary processing of the occurrences and of the times, 
which makes it possible to reduce the number of items 
of information to be stored, and on the other hand on 
the use of predefined data structures of prefixed sizes 
in the metering file (or in each of the files) . 

30 

Specifically, each of these data structures is 
associated with a specific item of information and with 
a corresponding processing. For example, the data 
structure may consist of a word of four bytes which is 
35 intended to receive the aggregate nximber of occurrences 
that have arisen between 12 pm and 1 pm each day for a 
week. In another example, the data structure is 
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intended to receive the number of times that 
occurrences have arisen during more than one minute in 
a row, the events examined corresponding to 
measurements performed with a temporal sampling 
5 stepsize of 2 seconds. The summary processing performed 
therefore relies on specific algorithms making it 
possible to ^'consolidate" the results. 

The at least partial temporal reconstitution pertains 
to the targeted aims: if one wishes to pinpoint a 
malfunction in time to within one second, the 
information recorded must be sufficient to pinpoint to 
within one second all the occurrences that have arisen; 
if one wishes to check the calls to a piece of 
software, the information must make it possible to 
dependably ascertain the number of calls and to at 
least statistically verify their temporal distribution. 
In all cases, the temporal reconstitution makes it 
possible at least to approximately reconstitute the log 
of the events that have occurred . 

Two categories of events to which the device of the 
invention has the ability to be applied may be 
distinguished: 

25 - those which are detected passively when they 
happen in a punctuated manner, in a way which generally 
cannot be forecast in the detail of their occurrences; 
this category includes for example telephone calls or 
calls to a piece of software, the switching on of 

30 engines or depressions of a brake; 

and those which are caused by measurements, at 
deteinmined sampling instants; this category relies for 
example on measurements of altitudes or of speeds, the 
events consisting of certain particular features of the 

35 altitudes or speeds measured (the speed overshoots 
predefined safety levels, the altitude goes below or 
above critical altitudes, etc.). 
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To process one type of events, the use of a single file 
is preferred- It is thus possible to concentrate all 
the information required, thereby simplifying and 
5 easing accesses in record mode and then the steps of 
utilization. Additionally, when several categories of 
distinct events are of interest, several metering files 
are preferably used, one file per category of events. 
This embodiment facilitates independence of the 
10 processing operations and of the utilization of the 
results, and clarifies the use of these files . 

Access to the clock or to the clocks may be direct or 
otherwise. For example, in a particular embodiment, the 

15 metering device is informed at one and the same time of 
the occurrence of an event and of the associated 
instant, by one or more external systems. The combined 
utilization of several clocks assumes their appropriate 
synchronization, at least when they pertain to one and 

20 the same type of events. 

The possibility of obtaining files of fixed sizes is 
especially beneficial in respect of embedded systems, 
for which the storage considerations may be decisive. 

25 

In a preferred form of embodiment, the summary 
processing module is designed to produce at least two 
types of distinct results, at least one of these types 
of results comprising redundancies with respect to the 
30 other types of results, so as to allow checks of 
consistency of the results. 

This embodiment is especially relevant in respect of 
checks made on the events that have happened, for 
35 example to verify the number of calls to a software 
service at a licensee's with a view to billing, the 
files then advantageously being encrypted. 
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In this preferred embodiment, it is advantageous for 
the summary processing module to be designed so that 
the various types of results provide complementary 
5 information. Thus, the existence of several types does 
not serve only to validate the results in a more 
reliable manner, but also to aggregate information 
useful for later analyses . 

10 According to a preferred mode of these types of 

results, the latter coinprise: 

a first type of results consisting of numbers of 

said occurrences per slot of durations of gaps between 

two of the consecutive occurrences 
15 - and a second type of results consisting of nximbers 

of the occurrences per consecutive time slot of a 

predetermined period. 

Thus, to the information regarding succession of the 
20 events per time slot within a given timescale, for 
example during a month (second type of results) , is 
added information on the distribution of the events 
according to the durations which separate them (first 
type) . It is thus possible to refine the cues 
25 pertaining to the chronological progress, by 
interesting oneself in the frequency of occurrences. 

Preferably, the slots of durations of gaps of the first 
type of results then have amplitudes increasing not 
30 strictly with these durations (that is to say which 
grow with the durations but may admit plateaux) . 

According to several interesting provisions for 

embodying the metering device of the invention, the 

35 physical events comprise, separately or in 
combination (s) : 
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calls to a piece of software situated on a source 
machine by appliances able to coitimunicate with this 
machine; 

telephone calls; 
5 - predefined maneuvers in a motor vehicle, for 
example the use of the brakes in order to ascertain 
whether the wear to the brake pads is normal or 
otherwise; 

uses of computer functionalities available on a 
10 machine and liable to undergo malfunctions on account 
of technical problem.s; for example, to analyze the 
origin of computer crashes, a set of metering files is 
provided, comprising one file per function suspected of 
possibly leading to a crash, so as to examine whether 
15 there exists a link between the use (or the large 
frequency of use) of a function and the anomaly noted. 

The invention also relates to a method of temporal 
metering of events, in which: 
2 0 - occurrences of physical events are flagged in real 
time, 

at least one clock is accessed so as to obtain a 
current time of each of these occurrences 

and information pertaining to the occurrences and 
2 5 to the corresponding current times is recorded in at 
least one metering file, this information authorizing 
an at least partial temporal reconstitution of the 
occurrences . 

30 According to the invention, a summary processing of the 
occurrences and of the current times is performed 
automatically, so as to produce condensed results and 
the information is recorded in the form of the 
condensed results, in predefined data structures of 

35 prefixed sizes of the metering file, so as to make it 
possible to keep the size of this file constant during 
successive recordings of the information . 
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This method is preferably implemented by means of any 
one of the modes of embodiment of the metering device 
of the invention. 

5 

A subject of the invention is also a device for 
temporal analysis of events on the basis of at least 
one metering file obtained by means of a metering 
device in which at least two types of distinct results 
10 with redundancies are used. This device comprises: 

a module for extracting the results recorded in 
this file, 

a module for verifying consistencies of the 
results respectively of these types of results, 
15 - and a module for producing a warning signal 
intended for a user in the case of inconsistency of 
these results. 

Advantageously, the metering file then being obtained 
2 0 by means of a metering device for which the types of 

results provide complementary information, the temporal 

analysis device also comprises: 

a module for inputting requests of a user, these 

requests pertaining to temporal cues relating to the 
25 occurrences of the events, 

a module for combined processing of the types of 

results, which module is designed to produce the 

temporal cues as a function of the information 

recorded, 

30 - and a module for presenting these temporal cues to 
the user. 

The invention applies also to a method of temporal 
analysis of events corresponding to the events analysis 
35 device of the invention, and which is preferably 
implemented by means of one of the modes of embodiment 
of the latter. 
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The invention also relates to a computer program 
product comprising program code instructions for the 
execution of the steps of the method of metering or of 
5 temporal analysis of events of the invention, when this 
program is executed on a computer. The expression 
''computer program product" is understood to mean a 
computer program medium, which can consist not only of 
a storage space containing the program, such as a 
10 diskette or a cassette, but also of a signal, such as 
an electrical or optical signal . 

The invention will be better understood and illustrated 
by means of the following examples of embodiment and of 
15 implementation, which are in no way limiting, with 
reference to the appended figures in which: 

figure 1 is a basic diagram of a device for 
temporal metering of events in accordance with the 

20 invention; 

figure 2 is a basic diagram of a device for 
temporal analysis of events which is associated with 
the device of figure 1; 

figure 3 shows a first type of results obtained 

25 with the device of figure 1 and designed to be analyzed 
by means of the device of figure 2, in the form of a 
histogram giving the number of occurrences of events as 
a function of slots of durations of gaps between two 
consecutive events ; 

30 - figure 4 shows a second type of results obtained 
with the device of figure 1 and designed to be analyzed 
by means of the device of figure 2, in the form of a 
histogram giving the nximber of occurrences of events as 
a function of consecutive time slots. 

35 

In figures 1 and 2, the modules represented are 
functional units, which may or may not correspond to 
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physically distinguishable units. For example, these 
modules or some of them may be grouped together within 
a single component, or constitute functionalities of 
one and the same piece of software. Conversely, certain 
5 modules may possibly be composed of separate physical 
entities . 

A device 1 for temporal metering of events (figure 1) 
is linked to an events detection module 5, capable of 

10 detecting any triggering of an event of a predefined 
category, for example access to a software service by 
third parties or the triggering of particular 
operations performed on the machine hosting the device 
1 (switch on, access to the Internet, etc.). By way of 

15 example, the module 5 is designed to detect three types 
of distinct events. 

The temporal metering device 1 is designed to produce 
information pertaining to the occurrences of the events 
2 0 considered and to their temporal progress, and to 
record this information in metering files Fl, F2 and F3 
associated respectively with the three categories of 
events detected. 

2 5 This device 1 comprises a module 11 for real time input 
of occurrences of events detected by the detection 
module 5, a module 12 for access to one or more 
clock (s) 10, making it possible to obtain a current 
time with each input of one of the occurrences, and a 

30 module 15 for recording the information mentioned above 
in the files Fl, F2 and F3 . 

The device 1 also comprises a module 13 for summary 
processing of the occurrences and of the current times, 
35 producing condensed results which form the information 
to be saved and transmitting same to the recording 
module 15. The latter is for its part responsible for 
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recording these condensed results in predefined data 
structures of fixed sizes of the files Fl, F2 and F3 . 

The files Fl, F2 and F3 are made available for a device 
5 for temporal analysis 2 of events (figure 2), 
responsible for utilizing the results recorded in these 
files. In the detailed embodiment, the device 2 is 
capable, after possible decryption, of verifying the 
consistency of the information supplied and of 
10 supplying specific cues in response to requests 
formulated by a user. 

This device 2 comprises a module 21 for extracting 
results from the files Fl, F2 and F3 , a module 22 for 

15 verifying consistency within each of the files, of the 
results extracted therefrom, and a module 23 for 
producing a signal S to a user interface 20 in case 
inconsistency is flagged. The consistency of the 
information is verified separately for each of the 

20 files Fl, F2 and F3 , and consists for example in making 
sure that the sum of the durations associated with 
events (such as the durations of gaps between the 
starts of two consecutive events) does not exceed a 
ceiling corresponding to a total duration of 

25 implementation, or that redundant information is not 
contradictory . 

The temporal analysis device 2 also comprises a unit 24 
for inputting requests via the user interface 20, so as 

30 to obtain in particular statistical cues (distribution 
of the occurrences as a function of the hours of the 
day or of the period of the month, mean duration of gap 
between two occurrences, etc) or factual cues (number 
of occurrences arising in such a time slot of the 

35 month, duration of an interruption, identification of 
the interruptions greater than 1 h, etc) . A module 25 
for combined processing of the results is able to 

PF020161.PCT as filed 



- 14 - 

utilize the information extracted from the files Fl, F2 
and F3 to respond to the requests thus formulated. This 
module 25 transmits the desired cues, or possibly a 
message of impossibility of response, to a module 2 6 
5 for presenting information, which communicates with the 
user interface 20. 

The manner of operation of the devices 1 and 2 will be 
detailed on a particular case, in which one of the 
10 three categories of events consists of calls to a 
software service. The provisions of implementation are 
made explicit only for this category of events, a 
similar course of action being adopted for example for 
the other categories . 

15 

An executable piece of software supplying the software 
service is situated on a single machine, called the 
''source machine". It may be called by all the machines 
belonging to the same network, and executed on these 

20 machines. Access to the software is protected, the 
protection being tied to the source machine. The 
metering device 1, present in the source machine, makes 
it possible to meter all the calls in the file Fl. The 
latter is situated here in the same directory as the 

25 executable, and retains a size of a few k-bytes . Its 
constitution allows the temporal analysis device 2 to 
verify that the users have not modified it, as is set 
forth hereinbelow. 

30 The device 1 uses a specific feature of machines 
organized in a network, namely that all these machines 
have the same time to within a second, and that write 
access to a given file can be made only by a single 
machine at a given instant, even if all these machines 

35 have access to this file. When a machine has executed 
the software, it writes the ''date" on which it did it 
to the file. The clocks 10 are therefore in the present 
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case dispersed in the various machines and 
synchronized, the access module 12 of the device 1 
indirectly receiving the times of these clocks . The 
machine concerned subtracts moreover from this date, 
5 the ''date" of the previous call. A duration called At 
is thus obtained. 

According to the time spans between two calls. At may 
equal Is, 2s, 3s... 1 min. . . 1 min 2 0 s. . . 2 min. . . 

10 1 h. . . 1 day. . . 1 week, the durations At being sampled 
in a nonlinear manner (that is to say the sampling 
stepsize varies) . For each stepsize, the summary 
processing module 13 meters all the durations At, 
storing them in a register corresponding to this 

15 stepsize. By virtue of the nonlinear sampling, relevant 
information is obtained while limiting the storages 
required. Specifically, while it is useful to ascertain 
to within a second the duration between two calls 
separated by 10 s (that is to say with an accuracy of 

20 10%), it is unnecessary to know to within a second the 
duration between two calls separated by 1 day (to 
maintain an accuracy of 10%, a stepsize of 2 hours is 
sufficient) . 

25 For example: 

• For At varying from 0 s to 59 s, the stepsize 
equals one second; sixty registers Rao to Rass are then 
reserved in the file Fl to meter these durations At. If 

30 the duration At equals 30 s, we add 1 to the register 
Ra29- We thus have a histogram of the durations At lying 
between 0 s and 59 s, with a stepsize of 1 second. 

• For At varying from 1 min to 4 min 58 s, the 
stepsize equals two seconds. In the file Fl, are then 

35 reserved (5-1) * 60 / 2 = 120 registers called Rbo to 
Rbii9 to meter these durations At. If At equals 2 min 
17 s, we add 1 to the register Rb38- We thus have a 
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histogram of the At lying between 1 min and 4 min 58 
with a stepsize of 2 seconds. 

• For At varying from 5 min to 15 min 55 s, the 
stepsize equals two seconds. In the file Fl, are then 

5 reserved (15-5) * 60 / 5 = 120 registers called Rco to 
Rcii9 to meter these durations At. If At equals 10 min 
03 s, we add 1 to the register Rceo- We thus have a 
histogram of the At lying between 5 min and 15 min 
55 s, with a stepsize of 5 seconds. 
10 • 

« For At varying from 2 h to 4 h, the stepsize 

equals 1 min. In the file Fl, are then reserved (4-2) * 
60 = 120 registers called Rno to Rnii9 to meter these 
durations At. If At equals 1 h, we add 1 to the 
15 register Rneo- We thus have a histogram of the At lying 
between 2 h and 2 h 59 min, with a stepsize of 1 min. 

• ... 

• For At varying from 1 day to 10 days, the 
stepsize equals 1 hour. In the file Fl, are then 

20 reserved (10-1) * 24 = 216 registers called Rxo to Rx2i5 
to meter these durations At. With At equals 8 days, 2 
hours, 13 min and 15 s, we add 1 to the register Rxi94 • 
We thus have a histogram of the At lying between 1 and 
10 days, with a stepsize of 1 hour. 

25 • ... 

We thus obtain a histogram Hi (figure 3), giving 
numbers N± of occurrences of the calls (axis 32) as a 
function of slots PEi of durations of gap At between two 
30 consecutive occurrences (axis 31) . 

By imposing the condition that, at the start of the use 
of the software, the histogram HI is blank, it is 
possible by periodically analyzing it (period P) , for 
35 example every month, to ascertain the duration of use 
of the software. The period P is agreed beforehand in 
the protocol between the client and the supplier of the 
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software, that hosts the temporal analysis device 2. 
The client thus sends the file Fl to the supplier 
according to this periodicity (the periodicity may be 
different for the files Fl, F2 and F3, although a 
5 grouped send is more practical to implement) . In the 
case illustrated by the histogram HI, it is assumed 
that one is dealing with a first month of monitoring, 
hence that the results displayed are directly 
representative of the events occurring during this 
10 month. Beyond that, it is expedient to subtract from 
the most recent histogram HI, that obtained the 
previous month, which operation is performed 
automatically by the temporal analysis device 2. 

15 Let us consider the slot PEi, time slice lying between 
Ati and Ati+i, and a number Ni of uses during this time 
slice, giving the number of times in which the time 
interval between two calls lies between Ati and Ati+i . 
If for example Ni = 20, ti = 1 h and ti+i = 2 h, and if 

2 0 Ni is the only nonzero value of the n\imbers of 
occurrences, then we know that the software has been 
used to the minimum for 20 hours and to the maximxim for 
40 hours, and that 2 0 calls to the software took place 
within this duration. In another example Ni = 1, ti = 4 

2 5 days and ti+i = 5 days, we know that an interruption of 
4 or 5 days has occurred. 

In current use mode, the client sends the file Fl thus 
defined every month at the same time. By differencing 

30 on the basis of the slots PEi the content of the 
histograms HI from one month to another, the temporal 
analysis device 2 determines the number of occurrences 
Ni for the current month. The file Fl is therefore kept 
at the client's and automatically updated in tempo with 

35 the calls, and has not been manipulated by this client. 
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A second histogram H2 (figure 4) is recorded in the 
file Fl . It gives the number N'j of accesses to the 
software (axis 34) during each time slot PTj of a period 
P (axis 33), corresponding here to each hour of the 
5 month for the first 54 hours. The month is therefore 
broken down into 24 h * 31 days, i.e. 744 registers. 
Just as for the histogram HI, the histogram H2 
represented here is established during the first month. 
For the succeeding months, the results are obtained 
10 from the file Fl communicated by the client, by 
subtracting from the most recent histogram H2 , that 
obtained the previous month. 

If an interruption of more than an hour occurs, it is 
15 therefore possible to identify it, since the registers 
tied to these hours are not incremented during the 
month considered. Thus, it is noted that an 
interruption of service (referenced 35 in the histogram 
H2) has probably taken place for two hours (hours 36 
20 and 37), since 24 hours earlier, the number of calls 
was very high (around 3000 calls for the thirteenth 
hour, and around 600 for the fourteenth) . 

By using the two types of information storage described 
25 hereinabove, the temporal analysis device 2 
(verification module 22) can detect any frauds of the 
client, in particular in the cases set forth 
hereinbelow : 

• a sizable duration of gap At (for example 

30 greater than two days) has been detected in the 
histogram HI, corresponding to a number of hours of non 
use (for example 50) in the histogram H2 , although the 
client declares that he had not stopped the software 
call service: hence, at a given moment he made a copy 
35 of the file Fl, and he replaced the current file Fl by 
this copy two days later; 
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• a no-call hour is flagged in the histogram H2, 
although in the histogram Hi, the durations of gap At 
lying between 1 h and 2 h are all zero (one of them 
ought to be nonzero since there was an interruption of 

5 at least one hour, hence a dwell of at least one hour 
between two calls) : the client has therefore modified 
the file Fl, since there is inconsistency; 

• the number of calls is zero for all the hours 
in the histogram H2 , although in the histogram HI, one 

10 of the durations of gap At greater than 2 hours is 
associated with calls: the client has modified the file 
Fl, since there is inconsistency. 

Moreover : 

15 - at any moment, the total sum of the contents of 

the registers of the histogram H2 must be equal to the 
total sum of the contents of the registers per hour of 
the histogram Hi; 

and over a month, the sums S NiAti and S NiAti+i 

2 0 in the histogram H2 must be respectively less than and 
greater than a month, with Ni corresponding to the 
register storing the dwells between calls lying between 
Ati and Ati+i (slot PEi) . 

25 If this is not the case, and assuming that the 
calculation of the time in the machines is accurate, 
the file Fl has been modified, 

According to a particular illustration, the mean number 
30 of calls to the software service in a month is 1 
million, i.e. one call every 2.6 seconds. If a low 
estimate is made, for example that the number of calls 
is 100 000 per month, then there is a call every 26 
seconds. The breakdown indicated in table 1 is then 
35 effected, in slices of duration of gap At (variable 
duration between the values At) , while each time 
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indicating a minimiim error and a maximum error in the 
duration of gap At per slot PEi. 
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Table 1 - Stepsize cmd errors in the histogram HI 



Intervals of 
durations At 


Stepsize of 
the slots 
PEi 


Min error 


Max error 


Number of 
registers 


Is — ^ 5 min 


Is 


0.33% 


100% 


300 


5min2s — > 10 min 


2s 


0.33% 


0.67% 


150 


10min5s->'30 min 


5s 


0.83% 


0.28% 


240 


30minl0s-^60 min 


10s 


0.56% 


0.28% 


180 


Ih0min20s->2h 


20s 


0.28% 


0.56% 


180 


2h0min30s->4h 


30s 


0.21% 


0.42% 


240 


4hlmin-^6h 


Imin 


0.28% 


0.42% 


120 


6h2min^8h 


2min 


0 .42% 


0 .56% 


60 


8h4min-^12h 


4min 


0.56% 


0.84% 


60 


12h^l7h54min 


6min 


0.56% 


0 . 84% 


60 


18h->23h50min 


lOmin 


0.70% 


0 .93% 


36 


Id^ld23h45min 


15min 


0.52% 


1.04% 


96 


2d->4d23h3 0min 


3 Omin 


0 .42% 


1 . 04% 


96 


4d-^8d23h 


Ih 


0.42% 


1.04% 


96 


8d^l5d2h 


2h 


0.42% 


1.04% 


96 


I6d->1 month 


4h 


0.42% 


1.04% 


96 



The total niirnber of registers for the histogram HI 
therefore equals 2106, i.e. a memory space of 8424 
bytes while storing the registers on 32 bits. 

10 In the same way, if the days of the month are broken 
down into hours for the histogram U2 , we obtain a 
number of registers of 744, i.e. 2976 bytes while 
storing the registers on 32 bits. 

15 For the sake of confidentiality, this information is 
encrypted for example in packets of 8 words (i.e. 32 
bytes) . 
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